Privacy Policy

Summary

TealTag is a B2B retail platform that helps showroom managers and retailers showcase products via QR-powered product pages and AI-generated imagery. We collect information necessary to provide these services, including your account details and business data. We do not sell your personal information to third parties.

Information We Collect

Account Information

When you create a TealTag account, we collect:

• Email address — provided through Apple Sign-In, Google Sign-In, or passwordless one-time code (OTP) login
• Name — as provided by your sign-in method or entered during onboarding
• Business information — business name, store details, and business category that you provide during account setup

Business and Product Data

When you use TealTag to manage your products and store, we collect:

• Product information — names, descriptions, pricing, categories, and photos you upload
• AI-generated images — images created using our AI style generation features
• QR code assignments — which QR codes are linked to which products
• Quotes and promotions — pricing quotes and promotional campaigns you create
• Store configuration — store settings and preferences

AI Feature Data

When you use AI-powered features (style browsing, image generation), we process:

• Style selections — which AI styles you browse and select
• Generation requests — prompts and parameters sent to generate product images
• AI interaction logs — records of AI feature usage for service improvement

Usage Data

We collect limited usage data to maintain and improve our services:

• App interaction data — features accessed, screens visited, and actions taken within the App
• Device information — device type, operating system version, and app version
• Error data — crash reports and error logs to diagnose and fix technical issues

Early Access Signups (Website)

If you sign up for early access on our website, we collect:

• Email address — to notify you about availability
• Source context — which page you signed up from (landing page or product page)

Information We Do Not Collect

• We do not collect precise geolocation data
• We do not use advertising identifiers or tracking pixels
• We do not collect financial information (payments are handled by Apple)

How We Use Your Information

We use your information to:

• Provide and operate the TealTag platform — manage your account, store, and products
• Generate AI images — process your style selections to create product imagery
• Enable QR scanning — serve product pages when customers scan your QR codes
• Process payments — manage subscription status (payment processing is handled by Apple via the App Store)
• Communicate with you — send service updates and respond to support requests
• Improve our services — analyze usage patterns to fix bugs and improve features
• Ensure security — detect and prevent unauthorized access or abuse

Data Sharing

We share your information only with the following categories of service providers that help us operate TealTag:

Infrastructure Providers

• Supabase — authentication, database hosting, and file storage
• Google Cloud Platform — API hosting and serverless compute
• Vercel — web hosting for tealtag.com and scan.tealtag.com

Authentication Providers

• Apple — if you sign in with Apple, Apple provides your name and email per your Apple ID settings
• Google — if you sign in with Google, Google provides your name and email per your Google Account settings

AI Service Providers

When you use AI image generation features, your style selections and generation parameters are sent to our AI processing infrastructure. Generated images are stored in our cloud storage and associated with your product records.

We Do Not

• Sell your personal information to anyone
• Share your data with advertisers
• Provide your business data to competitors or data brokers

Data Storage and Security

Where Your Data Is Stored

• Cloud databases — your account, business, and product data are stored in Supabase-hosted PostgreSQL databases
• Cloud storage — uploaded and AI-generated images are stored in Supabase Storage
• Local cache — a copy of your data is cached on your device using Apple's SwiftData framework for offline access
• Web servers — the TealTag website is hosted on Vercel's global edge network

Security Measures

• All data is transmitted over encrypted connections (HTTPS/TLS)
• API access requires authentication via JSON Web Tokens (JWT)
• Database access is protected by role-based access control policies
• API keys and service credentials are stored in secure secret management systems
• API endpoints are rate-limited to prevent abuse

Data Retention

• Account data — retained for as long as your account is active. You can request deletion at any time.
• Business and product data — retained for as long as your account is active
• AI-generated images — retained until you delete them or close your account
• Early access signups — retained until we launch and contact you, after which we delete your signup information unless you create an account
• Error and usage logs — retained for up to 90 days for debugging purposes

Your Rights and Choices

You have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate information through the App or by contacting us
• Deletion — request deletion of your account and associated data by contacting us
• Data portability — request your data in a portable format
• Opt out of AI features — you can use TealTag without AI image generation features
• Withdraw consent — you can stop using the service at any time

To exercise these rights, contact us at the address below.

Children’s Privacy

TealTag is a business-to-business platform designed for retail professionals. It is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly.

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt out of the sale of your personal information — we do not sell personal information

We do not discriminate against you for exercising any of these rights.

European Residents (GDPR)

If you are in the European Economic Area, our legal basis for processing your data is:

• Contract performance — processing necessary to provide the TealTag service you signed up for
• Legitimate interests — improving our services, ensuring security, and preventing abuse
• Consent — where you have provided explicit consent (e.g., optional AI features)

You have the right to access, rectify, erase, restrict processing, and port your data. You also have the right to lodge a complaint with your local data protection authority.

QR Code Scanning and Public Product Pages

When a customer scans a TealTag QR code, they are directed to a public product page on scan.tealtag.com. This page displays the product information you have made public (name, description, images, pricing). No personal information about the scanning customer is collected beyond standard web server logs (IP address, browser type) which are handled by our hosting provider Vercel.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date at the top of this page. For significant changes, we may also notify you through the App. Your continued use of TealTag after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

• Email: hey@cognitales.com
• Website: https://tealtag.com